Data We Collect

Introduction

At Aevum News, transparency is foundational to our editorial mission and our relationship with you. This document outlines precisely what data we collect, why we collect it, how we protect it, and the control you retain over your personal information.

What We Collect

We collect information in two categories: data you provide directly, and data we gather automatically when you interact with our platform.

• Account Information: Name, email address, subscription tier, and payment details (processed securely by PCI-compliant providers; we never store full card numbers).
• Usage Data: Articles viewed, time spent, click patterns, and navigation paths to improve content delivery and site performance.
• Device & Network Info: IP address, browser type, operating system, device identifiers, and approximate location (city/region level only).
• Cookies & Tracking: Essential cookies for authentication, analytics cookies for traffic measurement, and preference cookies for language/theme settings.
• Communications: Records of support tickets, newsletter feedback, or voluntary survey responses.

How We Use Your Information

Every piece of data we process serves a specific, legitimate purpose aligned with our editorial and operational standards:

• Delivering and maintaining access to subscribed content and premium features
• Personalizing reading recommendations without compromising editorial neutrality
• Analyzing site performance to optimize load times and accessibility
• Communicating service updates, security alerts, and billing confirmations
• Detecting and preventing fraud, abuse, or unauthorized access
• Complying with legal obligations and journalistic standards

Legal Basis for Processing

We rely on established legal grounds to process your data in accordance with GDPR, CCPA, and applicable international privacy frameworks:

• Contractual Necessity: To fulfill your subscription agreement and provide requested services
• Explicit Consent: For marketing communications, optional analytics, and personalized features (easily withdrawable anytime)
• Legitimate Interests: Site security, fraud prevention, and service improvement
• Legal Obligation: Tax compliance, data retention mandates, and law enforcement requests

Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined above. Retention periods vary by data type:

• Account data: While your subscription is active, plus 24 months for billing records
• Usage & analytics data: Aggregated and anonymized after 12 months
• Communication records: 36 months for support and compliance purposes
• Deleted data is securely erased from active systems and backups according to industry-standard sanitization protocols.

Sharing & Third-Party Disclosure

Aevum News does not sell, trade, or rent your personal information. We may share data only in the following circumstances:

• Service Providers: Hosting, payment processing, email delivery, and analytics partners bound by strict data processing agreements
• Legal Requirements: When compelled by court order, subpoena, or regulatory authority
• Business Transfers: In the event of merger, acquisition, or asset sale, with notice to users and continuity of privacy protections
• Consent-Based Sharing: Only when you explicitly opt into partnerships or research programs

Your Rights & Choices

Depending on your jurisdiction, you may exercise the following rights regarding your personal data:

• Access & Portability: Request a copy of your data in a machine-readable format
• Rectification: Update or correct inaccurate information
• Erasure: Request deletion of your account and associated data
• Restriction & Objection: Limit processing or object to direct marketing
• Consent Withdrawal: Opt out of analytics or promotional emails via preference center or email footer

Security Measures

We implement industry-standard technical and organizational safeguards to protect your data against unauthorized access, alteration, or disclosure:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Role-based access controls and multi-factor authentication for internal systems
• Regular third-party security audits and penetration testing
• Automated threat detection and incident response protocols
• Staff privacy training and strict confidentiality agreements

Contact Us

If you have questions about this data collection policy, wish to exercise your rights, or report a privacy concern, our Data Protection Office is available to assist:

You also have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.